Consider the following quote from the official JBoss documentation (available at https://docs.jboss.org/jbossas/docs/Getting_Started_Guide/4/html-single/index.html):
"The JMX Console is the JBoss Management Console, which provides a raw view of the JMX MBeans that make up the server. They can provide a lot of information about the running server and allow you to modify its configuration, start and stop components, and so on."
If we find an open instance of JBoss with unauthenticated access to the JMX console, we can upload the shell to the server using the MainDeployer option. This allows us to fetch a WAR file from a URL and deploy it on the server. The JMX console is shown in the ...
